<!--
  This file is a part of the open-eBackup project.
  This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0.
  If a copy of the MPL was not distributed with this file, You can obtain one at
  http://mozilla.org/MPL/2.0/.
  
  Copyright (c) [2024] Huawei Technologies Co.,Ltd.
  
  THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
  EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
  MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
  -->


<!DOCTYPE html
  PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
   
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="DC.Type" content="topic">
<meta name="DC.Title" content="Managing Ransomware Detection Snapshots">
<meta name="product" content="">
<meta name="DC.Relation" scheme="URI" content="en-us_topic_0000002079002573.html">
<meta name="prodname" content="">
<meta name="version" content="">
<meta name="brand" content="Online Help for Ransomware Protection-Dorado V700R001C00">
<meta name="DC.Publisher" content="20241226">
<meta name="DC.Format" content="XHTML">
<meta name="DC.Identifier" content="EN-US_TOPIC_0000002042804928">
<meta name="DC.Language" content="en-us">
<link rel="stylesheet" type="text/css" href="public_sys-resources/commonltr.css">
<title>Managing Ransomware Detection Snapshots</title>
</head>
<body style="clear:both; padding-left:10px; padding-top:5px; padding-right:5px; padding-bottom:5px"><a name="EN-US_TOPIC_0000002042804928"></a><a name="EN-US_TOPIC_0000002042804928"></a>

<h1 class="topictitle1">Managing Ransomware Detection Snapshots</h1>
<div><p>You can perform operations on ransomware detection snapshots on ProtectManager.</p>
<p>You need to log in to ProtectManager and choose <span class="menucascade"><b><span class="uicontrol">Data Security</span></b> &gt; <b><span class="uicontrol">Intelligent Ransomware Detection Results</span></b> &gt; <b><span class="uicontrol">Intelligent Ransomware Detection Results</span></b></span>. <a href="#EN-US_TOPIC_0000002042804928__table37351529115014">Table 1</a> describes the related operations.</p>

<div class="tablenoborder"><a name="EN-US_TOPIC_0000002042804928__table37351529115014"></a><a name="table37351529115014"></a><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000002042804928__table37351529115014" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Operations related to ransomware detection snapshots</caption><colgroup><col style="width:28.04%"><col style="width:29.609999999999996%"><col style="width:42.34%"></colgroup><thead align="left"><tr><th align="left" class="cellrowborder" valign="top" width="28.04280428042804%" id="mcps1.3.3.2.4.1.1"><p>Operation</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="29.61296129612961%" id="mcps1.3.3.2.4.1.2"><p>Description</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="42.344234423442344%" id="mcps1.3.3.2.4.1.3"><p>Navigation Path</p>
</th>
</tr>
</thead>
<tbody><tr><td class="cellrowborder" valign="top" width="28.04280428042804%" headers="mcps1.3.3.2.4.1.1 "><p>Viewing information about local file systems</p>
</td>
<td class="cellrowborder" valign="top" width="29.61296129612961%" headers="mcps1.3.3.2.4.1.2 "><p><strong>Context</strong></p>
<p>This operation enables you to view the number of ransomware detection snapshots created for local file systems and the detection status.</p>
</td>
<td class="cellrowborder" valign="top" width="42.344234423442344%" headers="mcps1.3.3.2.4.1.3 "><p><a href="#EN-US_TOPIC_0000002042804928__table141302112319">Table 2</a> and <a href="#EN-US_TOPIC_0000002042804928__table2169132831017">#EN-US_TOPIC_0000002042804928/table2169132831017</a> describe the related parameters.</p>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="28.04280428042804%" headers="mcps1.3.3.2.4.1.1 "><p>Viewing ransomware detection snapshot information</p>
</td>
<td class="cellrowborder" valign="top" width="29.61296129612961%" headers="mcps1.3.3.2.4.1.2 "><p><strong>Context</strong></p>
<p>This operation enables you to view ransomware detection snapshot details.</p>
</td>
<td class="cellrowborder" valign="top" width="42.344234423442344%" headers="mcps1.3.3.2.4.1.3 "><ol><li>Click the number of ransomware detection snapshots to display the <strong>Ransomware Detection Snapshot</strong> page.</li><li><a href="#EN-US_TOPIC_0000002042804928__table146494546404">Table 3</a> describes the related parameters.</li></ol>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="28.04280428042804%" headers="mcps1.3.3.2.4.1.1 "><p>Manual detection</p>
</td>
<td class="cellrowborder" valign="top" width="29.61296129612961%" headers="mcps1.3.3.2.4.1.2 "><p><strong>Context</strong></p>
<p>This operation enables you to perform manual detection for a file system.</p>
</td>
<td class="cellrowborder" valign="top" width="42.344234423442344%" headers="mcps1.3.3.2.4.1.3 "><div class="p">Locate the row that contains the desired file system and choose <strong>More</strong> &gt; <strong>Manually Detect</strong>.<div class="note"><span class="notetitle"> NOTE: </span><div class="notebody"><p>You can also click the number of the ransomware detection snapshots to go to the <strong>Ransomware Detection Snapshot</strong> page, locate the row that contains the target ransomware detection snapshot, and choose <strong>More</strong> &gt; <strong>Manually Detect</strong>.</p>
</div></div>
</div>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="28.04280428042804%" headers="mcps1.3.3.2.4.1.1 "><p>Handling false detection</p>
</td>
<td class="cellrowborder" valign="top" width="29.61296129612961%" headers="mcps1.3.3.2.4.1.2 "><p><strong>Context</strong></p>
<p>If an uninfected copy is detected as <span class="uicontrol"><b><span><strong>Infected</strong></span></b></span>, you can correct the copy status through false detection handling.</p>
<p><strong>Precautions</strong></p>
<p>Only copies in <strong><span><strong>Infected</strong></span></strong> status support false detection handling. After the false detection is handled, no alarm will be generated for subsequent similar copies.</p>
</td>
<td class="cellrowborder" valign="top" width="42.344234423442344%" headers="mcps1.3.3.2.4.1.3 "><div class="p">Locate the row that contains the desired file system and choose <strong>More</strong> &gt; <strong>Handle False Detection</strong>.<div class="note"><span class="notetitle"> NOTE: </span><div class="notebody"><p>You can also click the number of the ransomware detection snapshots to go to the <strong>Ransomware Detection Snapshot</strong> page, locate the row that contains the target ransomware detection snapshot, and choose <strong>More</strong> &gt; <strong>Handle False Detection</strong>.</p>
</div></div>
</div>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="28.04280428042804%" headers="mcps1.3.3.2.4.1.1 "><p>Viewing the detection report</p>
</td>
<td class="cellrowborder" valign="top" width="29.61296129612961%" headers="mcps1.3.3.2.4.1.2 "><p><strong>Context</strong></p>
<p>This operation enables you to view the detection report of a ransomware detection snapshot.</p>
</td>
<td class="cellrowborder" valign="top" width="42.344234423442344%" headers="mcps1.3.3.2.4.1.3 "><ol><li>Click the number of ransomware detection snapshots to display the <strong>Ransomware Detection Snapshot</strong> page.</li><li>Locate the row that contains the target ransomware detection snapshot and choose <strong>More</strong> &gt; <strong>Detection Report</strong>.</li></ol>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="28.04280428042804%" headers="mcps1.3.3.2.4.1.1 "><p>Restoration</p>
</td>
<td class="cellrowborder" valign="top" width="29.61296129612961%" headers="mcps1.3.3.2.4.1.2 "><p><strong>Context</strong></p>
<p>This operation enables you to use a ransomware detection snapshot to restore data.</p>
<p><strong>Precautions</strong></p>
<p>You are advised to select a ransomware detection snapshot in <span class="uicontrol"><b>Uninfected</b></span> status for restoration.</p>
</td>
<td class="cellrowborder" valign="top" width="42.344234423442344%" headers="mcps1.3.3.2.4.1.3 "><ol><li>Click the number of ransomware detection snapshots to display the <strong>Ransomware Detection Snapshot</strong> page.</li><li>Locate the row that contains the target ransomware detection snapshot and choose <strong>More</strong> &gt; <strong>Restore</strong>.</li></ol>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="28.04280428042804%" headers="mcps1.3.3.2.4.1.1 "><p>Modifying a retention policy</p>
</td>
<td class="cellrowborder" valign="top" width="29.61296129612961%" headers="mcps1.3.3.2.4.1.2 "><p><strong>Context</strong></p>
<p>This operation enables you to reset the retention period of a ransomware detection snapshot.</p>
<p><strong>Precautions</strong></p>
<p>After modification, the retention period of the ransomware detection snapshot is calculated from the current time.</p>
</td>
<td class="cellrowborder" valign="top" width="42.344234423442344%" headers="mcps1.3.3.2.4.1.3 "><ol><li>Click the number of ransomware detection snapshots to display the <strong>Ransomware Detection Snapshot</strong> page.</li><li>Click the snapshot time. On the basic information page of the ransomware detection snapshot, choose <strong>More</strong> &gt; <strong>Modify Retention Policy</strong>.<div class="note"><span class="notetitle"> NOTE: </span><div class="notebody"><p>You can set the retention period to be permanent or to <em>xx</em> days, <em>xx</em> weeks, <em>xx</em> months, or <em>xx</em> years.</p>
</div></div>
</li></ol>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="28.04280428042804%" headers="mcps1.3.3.2.4.1.1 "><p>Deleting a ransomware detection snapshot</p>
</td>
<td class="cellrowborder" valign="top" width="29.61296129612961%" headers="mcps1.3.3.2.4.1.2 "><p><strong>Context</strong></p>
<p>This operation enables you to delete a ransomware detection snapshot that is unavailable or no longer needed.</p>
<p><strong>Precautions</strong></p>
<ul><li>Before deleting a ransomware detection snapshot, ensure that the snapshot is no longer used for restoration.</li><li>A ransomware detection snapshot that is in <span class="uicontrol"><b>Uninfected</b></span> status and configured with <strong>Uninfected Snapshot Lock</strong> cannot be deleted.</li><li>A ransomware detection snapshot in <span class="uicontrol"><b>Detecting</b></span> status cannot be deleted.</li><li>If the last uninfected copy of a resource is deleted, the accuracy of subsequent ransomware detection for copies will be affected. Exercise caution.</li></ul>
</td>
<td class="cellrowborder" valign="top" width="42.344234423442344%" headers="mcps1.3.3.2.4.1.3 "><ol><li>Click the number of ransomware detection snapshots to display the <strong>Ransomware Detection Snapshot</strong> page.</li><li>Locate the row that contains the target ransomware detection snapshot and choose <strong>More</strong> &gt; <strong>Delete</strong>.</li></ol>
</td>
</tr>
</tbody>
</table>
</div>

<div class="tablenoborder"><a name="EN-US_TOPIC_0000002042804928__table141302112319"></a><a name="table141302112319"></a><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000002042804928__table141302112319" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Local file system parameters</caption><colgroup><col style="width:49.95%"><col style="width:50.05%"></colgroup><thead align="left"><tr><th align="left" class="cellrowborder" valign="top" width="49.95%" id="mcps1.3.4.2.3.1.1"><p>Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50.05%" id="mcps1.3.4.2.3.1.2"><p>Description</p>
</th>
</tr>
</thead>
<tbody><tr><td class="cellrowborder" valign="top" width="49.95%" headers="mcps1.3.4.2.3.1.1 "><p>Name</p>
</td>
<td class="cellrowborder" valign="top" width="50.05%" headers="mcps1.3.4.2.3.1.2 "><p>File system name.</p>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="49.95%" headers="mcps1.3.4.2.3.1.1 "><p>vStore</p>
</td>
<td class="cellrowborder" valign="top" width="50.05%" headers="mcps1.3.4.2.3.1.2 "><p>vStore to which the file system belongs.</p>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="49.95%" headers="mcps1.3.4.2.3.1.1 "><p>Ransomware Detection Snapshot</p>
</td>
<td class="cellrowborder" valign="top" width="50.05%" headers="mcps1.3.4.2.3.1.2 "><p>Number of ransomware detection snapshots.</p>
<div class="note"><span class="notetitle"> NOTE: </span><div class="notebody"><p>You can click the number of ransomware detection snapshots to view details.</p>
</div></div>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="49.95%" headers="mcps1.3.4.2.3.1.1 "><p>Status</p>
</td>
<td class="cellrowborder" valign="top" width="50.05%" headers="mcps1.3.4.2.3.1.2 "><p>Detection status of ransomware detection snapshots. The values include <strong>Infected</strong>, <strong>Uninfected</strong>, <strong>Undetected</strong>, <strong>Queuing</strong>, <strong>Detecting</strong>, and <strong>Exception</strong>.</p>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="49.95%" headers="mcps1.3.4.2.3.1.1 "><p>Last Detection Time</p>
</td>
<td class="cellrowborder" valign="top" width="50.05%" headers="mcps1.3.4.2.3.1.2 "><p>Time of the last snapshot detection.</p>
</td>
</tr>
</tbody>
</table>
</div>

<div class="tablenoborder"><a name="EN-US_TOPIC_0000002042804928__table146494546404"></a><a name="table146494546404"></a><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000002042804928__table146494546404" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Ransomware detection snapshot parameters</caption><colgroup><col style="width:49.95%"><col style="width:50.05%"></colgroup><thead align="left"><tr><th align="left" class="cellrowborder" valign="top" width="49.95%" id="mcps1.3.5.2.3.1.1"><p>Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50.05%" id="mcps1.3.5.2.3.1.2"><p>Description</p>
</th>
</tr>
</thead>
<tbody><tr><td class="cellrowborder" valign="top" width="49.95%" headers="mcps1.3.5.2.3.1.1 "><p>ID</p>
</td>
<td class="cellrowborder" valign="top" width="50.05%" headers="mcps1.3.5.2.3.1.2 "><p>Ransomware detection snapshot ID.</p>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="49.95%" headers="mcps1.3.5.2.3.1.1 "><p>Snapshot Time</p>
</td>
<td class="cellrowborder" valign="top" width="50.05%" headers="mcps1.3.5.2.3.1.2 "><p>Time when the ransomware detection snapshot is generated.</p>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="49.95%" headers="mcps1.3.5.2.3.1.1 "><p>Ransomware Detection Status</p>
</td>
<td class="cellrowborder" valign="top" width="50.05%" headers="mcps1.3.5.2.3.1.2 "><p>Ransomware detection snapshot status.</p>
<p>[Value range]</p>
<p><strong>Infected</strong>, <strong>Uninfected</strong>, <strong>Undetected</strong>, <strong>Queuing</strong>, <strong>Detecting</strong>, and <strong>Exception</strong></p>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="49.95%" headers="mcps1.3.5.2.3.1.1 "><p>Detection Time</p>
</td>
<td class="cellrowborder" valign="top" width="50.05%" headers="mcps1.3.5.2.3.1.2 "><p>Time when detection on the ransomware detection snapshot starts.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="en-us_topic_0000002079002573.html">Using Intelligent Ransomware Detection</a></div>
</div>
</div>

<div class="hrcopyright"><hr size="2"></div><div class="hwcopyright">Copyright &copy; Huawei Technologies Co., Ltd.</div></body>
</html>